Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/_fWzLCKSJmnuveEvkqcAAbIsnQU.roa
File: _fWzLCKSJmnuveEvkqcAAbIsnQU.roa (raw, json)
Hash identifier: hfCXoWjDXZMkDBWfgzrI+fe9FDLmJGHVyF9Qx+EgAyg=
Subject key identifier: FD:F5:B3:2C:22:92:26:69:EE:BD:E1:2F:92:A7:00:01:B2:2C:9D:05
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 019FDDC482AEA1261B6F3CB859644BDC376E
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/_fWzLCKSJmnuveEvkqcAAbIsnQU.roa
Signing time: Fri 07 Aug 2026 19:47:51 +0000
ROA not before: Fri 07 Aug 2026 19:47:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210413
IP address blocks: 194.127.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:c4:82:ae:a1:26:1b:6f:3c:b8:59:64:4b:dc:37:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: Aug 7 19:47:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdf5b32c22922669eebde12f92a70001b22c9d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:e1:e7:37:48:fc:69:d9:63:7d:02:ad:79:
6c:a4:c4:8f:5a:6c:70:f9:7e:97:33:76:f9:ae:49:
6c:d7:cd:64:a8:9f:3f:16:21:04:26:f8:50:0d:ce:
de:50:5c:7b:51:34:9a:c1:03:6a:fb:47:c6:06:5a:
87:7c:cf:1c:63:c4:13:5b:b9:95:95:38:ae:a8:03:
46:23:97:be:47:a2:df:d0:91:e2:5d:fb:c1:ea:24:
4b:45:36:09:2a:17:5d:11:f8:01:d8:c5:46:2e:b7:
f5:48:70:da:61:cf:38:7e:2d:8d:ff:38:68:8e:64:
78:8d:2f:5e:15:ed:96:06:5b:e6:27:37:74:5c:7c:
a6:f8:34:47:65:c7:0a:23:a1:0a:cd:53:5c:f7:5c:
d7:6e:3d:31:87:65:a6:df:c6:3f:f7:89:78:42:82:
8e:72:98:b6:78:92:a7:69:82:7b:d6:ba:18:a7:4f:
47:b4:09:b7:38:29:b4:8e:e5:c8:60:02:48:d7:a0:
bb:3a:f6:73:77:fe:24:ab:d7:c1:f6:21:a9:e8:ac:
74:81:c8:4d:e1:a7:67:f3:e8:19:37:e1:fd:23:fd:
fb:6c:47:b6:1e:38:14:f4:7f:92:bf:e3:3f:3c:dc:
96:23:33:89:04:d7:3f:d7:b4:d0:86:5b:2d:27:9c:
9b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F5:B3:2C:22:92:26:69:EE:BD:E1:2F:92:A7:00:01:B2:2C:9D:05
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/_fWzLCKSJmnuveEvkqcAAbIsnQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.109.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b6:98:23:a1:38:45:19:6d:de:5a:f6:b6:20:6c:06:77:e2:
42:c6:49:0a:0f:5d:b6:5b:05:94:b2:26:dc:92:3f:27:83:b4:
b5:27:a2:27:ed:e8:4e:22:17:3b:27:4b:2e:f3:57:a0:56:3d:
51:4a:93:93:53:e8:35:2b:ed:b6:06:49:90:78:8f:01:78:e0:
cc:59:cb:fc:50:6b:00:42:f8:09:55:cc:dd:fc:84:66:75:3c:
16:52:a0:f3:2b:43:e8:87:43:d7:79:37:4a:e0:ac:6a:45:95:
be:fb:ac:89:c0:f5:7f:90:1c:ef:3d:d4:a4:8b:bb:89:37:b9:
8f:4b:e3:c4:a5:12:75:fd:54:59:f9:79:35:3c:ad:43:c8:86:
37:7a:51:61:90:da:30:45:50:d5:44:fd:78:94:72:0f:ab:40:
e4:df:94:a3:f9:aa:c5:53:80:e7:7a:3b:d4:29:14:ec:36:1a:
e3:bc:c5:9b:32:aa:6e:dc:7e:af:9f:e8:72:dc:37:aa:b7:a1:
f2:8f:ff:7c:71:aa:41:c7:cf:21:5a:ad:3c:50:71:95:57:6b:
75:ea:16:3e:2f:b6:e6:6e:4a:2f:7d:98:cc:74:1c:92:68:e5:
6a:16:12:c4:1e:92:5f:2d:3d:53:e4:b0:d4:8d:9f:50:d8:b2:
68:0a:48:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:41:46 2026 by rpki-client